CVE-2009-1204

概要

参考情報

• dev.tikiwiki.org/tiki-view_tracker_item.php · Exploit
• info.tikiwiki.org/tiki-read_article.php · Patch
• secunia.com/advisories/34273 · Vendor Advisory
• tikiwiki.svn.sourceforge.net/viewvc/tikiwiki/branches/2.0/changelog.txt · Patch
• securityfocus.com/archive/1/501702/100/0/threaded
• securityfocus.com/bid/34105 · Exploit
• securityfocus.com/bid/34106 · Exploit
• securityfocus.com/bid/34107 · Exploit
• securityfocus.com/bid/34108 · Exploit

tikiwiki cms/groupware のその他の脆弱性

• CVE-2025-34111緊急 9.8An unauthenticated arbitrary file upload vulnerability exists in Tiki Wiki CMS Groupware version 15.1 and earlier via the ELFinder component…
• CVE-2021-36551中 5.4TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-calendar.php. This vulnerability a…
• CVE-2021-36550中 5.4TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-browse_categories.php. This vulner…
• CVE-2020-29254高 8.8TikiWiki 21.2 allows templates to be edited without CSRF protection. This could allow an unauthenticated, remote attacker to conduct a cross…
• CVE-2020-8966中 6.1There is an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in php webpages of Tiki-Wiki Groupwa…